Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e203231383539.roa
File:                     3131342e3131342e302e302f31382d3234203d3e203231383539.roa (raw, json)
Hash identifier:          pIt4b7xnDcf/2bsqo3Gx9aNls8ZbD3maIVn+Eh0MmrM=
Subject key identifier:   1E:2F:CB:9B:57:38:22:FE:B4:36:F5:48:B0:08:60:4E:B0:00:84:B2
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       55F922B8402D40BC5CEF7EBBF7CB0389D6B5FD2B
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e203231383539.roa
Signing time:             Thu 16 Apr 2026 00:19:21 +0000
ROA not before:           Thu 16 Apr 2026 00:14:21 +0000
ROA not after:            Thu 15 Apr 2027 00:19:21 +0000
asID:                     21859
IP address blocks:        114.114.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f9:22:b8:40:2d:40:bc:5c:ef:7e:bb:f7:cb:03:89:d6:b5:fd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Apr 16 00:14:21 2026 GMT
            Not After : Apr 15 00:19:21 2027 GMT
        Subject: CN=1E2FCB9B573822FEB436F548B008604EB00084B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:c1:2d:2d:98:4c:c9:31:6c:74:25:0f:34:
                    1b:be:ec:cd:fa:1b:bb:71:a5:0b:ac:79:62:92:33:
                    8e:7a:e9:ce:07:67:b0:26:d6:83:d0:04:83:7a:a4:
                    bd:27:3d:4b:08:64:76:b6:50:03:2b:30:0c:de:4d:
                    63:6f:a1:00:66:b5:b0:00:66:e1:a5:1f:e9:3a:a6:
                    f1:ee:81:fa:52:15:48:8c:52:dc:52:25:8e:07:6a:
                    d3:8b:64:6e:64:2c:2b:a9:32:b7:3a:2e:7a:8b:59:
                    bd:50:f4:39:69:f4:e3:9b:97:d7:5c:40:7a:37:34:
                    c6:a1:60:54:9d:27:9e:aa:13:4e:b1:d5:3c:42:fd:
                    29:f6:41:57:63:c6:01:43:5a:c9:4e:7f:59:07:ba:
                    d3:2b:c2:ae:80:09:00:36:04:ac:e3:62:d7:fc:92:
                    d6:95:da:a9:e6:97:85:49:dc:46:6d:72:e1:bd:67:
                    04:7a:f1:a3:14:63:c5:9f:6a:c6:b1:94:54:7f:ff:
                    8f:ec:0f:b4:00:18:00:55:27:ca:68:9a:7f:ed:5d:
                    d5:0a:91:fa:c4:75:a5:80:84:92:45:cf:85:3c:e8:
                    23:22:19:b7:17:13:3d:4d:63:cc:e4:a4:3f:76:7b:
                    04:c3:7b:d9:81:6c:bf:0d:1d:1f:b5:c4:de:5c:89:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2F:CB:9B:57:38:22:FE:B4:36:F5:48:B0:08:60:4E:B0:00:84:B2
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.114.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bd:40:60:cc:5d:e5:ae:14:29:8b:e1:1e:41:73:38:14:45:d2:
         bc:0c:5e:72:6c:3a:46:e4:33:28:b4:a8:ac:52:ed:b7:bd:da:
         f1:1f:f1:2a:0b:dd:63:b0:e4:3b:9d:1b:ef:28:ca:48:ba:21:
         29:8b:f0:3c:38:93:00:b5:63:af:11:37:25:db:a5:93:3e:c1:
         fb:da:88:7a:2f:26:5e:da:f5:d9:4c:b6:68:5d:22:14:58:53:
         d3:a7:1f:03:81:e9:e8:50:dd:82:dd:c8:63:5e:fd:18:c1:2e:
         76:04:cc:33:81:07:63:36:fa:76:cc:0a:b0:56:23:62:3a:53:
         90:9f:0a:47:c0:ee:6d:be:d4:ea:f7:20:97:57:ad:30:fa:ae:
         4c:e7:9d:50:44:09:4a:16:51:77:1f:56:3b:0f:42:d4:25:77:
         6d:a0:56:58:c5:32:c8:11:4e:87:c7:3e:de:b2:dd:2f:ea:a2:
         e1:eb:07:5a:31:2c:c9:e1:a3:d8:8b:b1:ad:d7:94:92:46:76:
         e0:0b:36:9b:36:58:a4:2f:c2:0b:f1:47:7d:43:18:26:2f:1b:
         9b:44:35:7e:67:c2:84:07:bf:14:9e:59:39:b9:c8:9d:c8:ba:
         e9:02:98:04:4c:e7:aa:fa:53:7b:46:00:25:82:20:1a:bd:0d:
         c9:be:9d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:05 2026 by rpki-client